Datasets: We preform experiments using the HQ-WMCA [1]} and the new PADISI-Face datasets that are suitable for our learning setting. The provided unknown attack protocols of these datasets contain only unknown attack types in the testing set and are not suitable for CL setting. As such, we used the Grandtest protocol of HQ-WMCA [1]} to first divide samples into a training and testing set. This protocol contains about \(1/3\)  of the samples in the test set, with proportional division of each attack type between the training and testing sets, while ensuring that BF samples in the two sets are participant disjoint. For the PADISI-Face dataset, we followed the same division scheme. For both datasets, the CL tasks are constructed using the training set and evaluation is performed on the test set.
<FIGURE>